TodayMail邮件系统 /mailcontrol/autoAlterTable.php 文件 tableName 参数SQL注入漏洞

Follow 0

Basic Fields

SSV ID:: SSV-92082

Find Time:: Unknown

Submit Time:: 2016-07-11

Level:

Category:: SQL 注入

Component:: TodayMail

Author:: Unknown

Submitter:: hhxx

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Unavailable Detail

PoC (pocsuite 插件) (pocsuite 插件)

Contributor hhxx totally have 1KB

Login to exchange

have 1 Exchange

Reference Linking

http://www.wooyun.org/bugs/wooyun-2016-0190531

Solutions

Temp Solutions

Unavailable Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes